andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
361 Commits 14 Branches 64 Tags
b9acd71ececa2b33ee5357b020d4b042061d58e3
Commit Graph
361 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
fitz123 2750d6e467 integrate ufw defaults management 2016-05-20 03:35:12 +07:00
Sebastian Gumprich eaea10b3e7 Merge pull request #81 from fitz123/remove_ugly_red_errors 
replace ignore_errors to failed_when to supress ugly error warnings
 2016-05-19 20:43:16 +02:00
fitz123 8ebc97c130 replace ignore_errors to failed_when to supress ugly error warnings for 'remove suid/sgid' task 2016-05-19 23:56:14 +07:00
Sebastian Gumprich 87778593d0 Merge pull request #79 from fitz123/ansible_2.0-bare_vars_fix 
fix bare variables usage for loops
 2016-05-19 18:21:56 +02:00
fitz123 b9afcfdc68 fix bare variables usage for loops 2016-05-18 01:35:41 +07:00
Sebastian Gumprich 13ad1d2664 Merge pull request #75 from hardening-io/release 
Release 3.0.0
3.0.0 		2016-03-13 20:32:38 +01:00
Sebastian Gumprich 827af75e7d release 3.0.0 2016-03-13 20:30:12 +01:00
Sebastian Gumprich 2d97a0872a new release 2016-03-13 20:22:51 +01:00
Christoph Hartmann 002ad0cbf7 Merge pull request #59 from hardening-io/ansible_2.0 
Ansible 2.0 support
 2016-03-06 12:28:36 +01:00
Sebastian Gumprich c3e9115f75 add webhook again 2016-03-05 21:25:08 +01:00
Sebastian Gumprich ec8519e4ff remove vagrantfile in kitchen.yml 2016-03-05 21:24:15 +01:00
Sebastian Gumprich dfdf722979 add test support for ansible 1.9 and 2.0 2016-03-05 21:19:13 +01:00
Sebastian Gumprich 1b35de9644 Ansible 2.0 support 
This role was tested with Ansible 2.0
 2016-02-24 08:14:41 +01:00
Christoph Hartmann 5cc477b6c5 Merge pull request #67 from hardening-io/mv_sysctl_to_defaults_2 
Move sysctl vars to defaults
 2016-02-24 08:13:34 +01:00
Sebastian Gumprich e9eac79851 remove vars-include line 2016-02-24 08:07:58 +01:00
Sebastian Gumprich 8747be1d0d Move sysctl vars to defaults 2016-02-24 08:07:58 +01:00
Christoph Hartmann c7308bcd67 Merge pull request #68 from hardening-io/add_webhook_to_travis 
add webhook for ansible galaxy
 2016-02-24 08:03:36 +01:00
Sebastian Gumprich 7d13247984 add webhook for ansible galaxy 
This way the build status is shown on ansible-galaxy.
 2016-02-24 07:54:48 +01:00
Christoph Hartmann ea862ccb3c Merge pull request #69 from hardening-io/update_platforms 
update platforms in meta-file
 2016-02-24 07:52:17 +01:00
Sebastian Gumprich 5587a2343e add debian 8 support. 2016-02-24 07:39:55 +01:00
Sebastian Gumprich 42d333d278 update platforms in meta-file 
this way the match the style used by ansible galaxy.
 2016-02-24 07:39:55 +01:00
Sebastian Gumprich 66f390f7e9 Merge pull request #66 from conorsch/update-include-tags 
Updates "tags" parameters on includes in main.yml
 2016-02-01 19:04:24 +01:00
Conor Schaefer 0cedd9915d Updates "tags" parameters on includes in main.yml 
Ansible v2 forbids in-line tags on include statements, and expects
"tags" to be always a task-level parameter. Older versions of Ansible
support both styles, so it makes sense to standardize on the latter.
 2016-01-31 13:08:24 -08:00
Christoph Hartmann 8bc5c23bcf Merge pull request #62 from hardening-io/sys_uid_gid 
make sys_uid and sys_gid configurable
 2016-01-31 13:21:54 +01:00
Sebastian Gumprich 4b4b58c643 make sys_uid and sys_gid configurable 2016-01-31 13:18:29 +01:00
Anton Lugovoi eedd504e33 Merge pull request #63 from hardening-io/suid_set_def_var 
Suid set def var, fix #64
 2016-01-31 05:59:52 +07:00
Sebastian Gumprich 7bc186e215 remove whitespace 2016-01-29 23:04:31 +01:00
Sebastian Gumprich a960535611 remove commented task 2016-01-20 21:05:56 +01:00
Sebastian Gumprich 73a8534712 set suid-var to default=omit 
this prevents the task "remove suid/sgid bit from all binaries except in system and user whitelist"
from failing when the suid-var is not set and `os_security_suid_sgid_remove_from_unknown`
is not set either.
See: https://github.com/ansible/ansible/issues/11964
 2016-01-20 21:04:16 +01:00
Sebastian Gumprich 469aa9ce7b Merge pull request #58 from hardening-io/kitchen-inspec 
use inspec as test framework
 2016-01-04 17:35:08 +01:00
Christoph Hartmann b98e860a07 use inspec as test framework 2016-01-02 22:44:50 +01:00
Christoph Hartmann 63a56d1f7e Merge pull request #57 from hardening-io/packages_as_attributes 
Packages as attributes
 2016-01-02 22:31:48 +01:00
Sebastian Gumprich 3078651291 Add apt-file for debian-based systems 2016-01-02 22:19:30 +01:00
Sebastian Gumprich dd60bea3d4 Remove packages with known issues on debian/ubuntu 2016-01-02 22:19:30 +01:00
Sebastian Gumprich 0bba152a01 Expose list of packages to remove as an attribute 2016-01-02 22:19:30 +01:00
Christoph Hartmann 965d39be8d Merge pull request #56 from hardening-io/change_cat_to_tags 
Change categories to tags for upcoming ansible 2.0
 2016-01-02 22:18:40 +01:00
Sebastian Gumprich b5bafbf75c Change categories to tags for upcoming ansible 2.0 2015-12-29 15:08:18 +01:00
Christoph Hartmann 9be0b350bd Merge pull request #55 from hardening-io/single_prompt_params 
Add SINGLE and PROMPT parameters.
 2015-12-25 17:32:42 +01:00
Sebastian Gumprich 13d056a0db Add SINGLE and PROMPT parameters. 2015-12-20 16:57:02 +01:00
Sebastian Gumprich d377b2bc5f Merge pull request #54 from hardening-io/chris-rock/changelog 
add changelog generator
 2015-12-06 20:44:47 +01:00
Christoph Hartmann 7d9c854873 update changelog 2015-12-06 16:56:24 +01:00
Christoph Hartmann 77f01ddf67 add changelog generator 2015-12-06 16:55:59 +01:00
Christoph Hartmann 1c057722a1 Merge pull request #52 from hardening-io/add_explicit_role_to_kitchen 
Add explicit role-path to kitchen.yml
2.0.0 		2015-11-28 17:42:03 +01:00
Sebastian Gumprich 1e08e56958 Add explicit role-path to kitchen.yml 
Before this PR role path was searched with regex in the docroot.
Now it's explicitly declared.

Also added two gems to gemfile for faster copying to virtualbox
 2015-11-26 23:09:30 +01:00
Christoph Hartmann 1ae134c6e7 Merge pull request #51 from hardening-io/fix_pam_template 
Fix pam passwdqc template
 2015-10-28 10:48:03 +01:00
Sebastian Gumprich 011a18d634 Fix pam passwdqc template 2015-10-25 12:17:34 +01:00
Christoph Hartmann 652474b8f1 Merge pull request #49 from hardening-io/new_dir_layout 
New dir layout
 2015-10-22 11:50:13 +02:00
Sebastian Gumprich 057fffa013 Change travis role path 2015-10-21 20:58:55 +02:00
Sebastian Gumprich 7eb8b4f3d3 Change directory layout. fix #48 
This change gets rid of the separate role dir
and puts everything into the root-directory, making
it possible to install the role via ansible galaxy.
 2015-10-21 20:52:46 +02:00
Christoph Hartmann d47e64f70d Merge pull request #46 from fitz123/master 
remove duplicate "update pam" task
 2015-10-18 15:56:29 +02:00